Extracted

• • Target

    a62d5acae7355991b2d967c2d77aa329b3a9fe234bf2616748aaaf14196966b7

  • Size

    448KB

  • MD5

    655d0f0862e457c2875d8f0620db2cfa

  • SHA1

    19af0abd56db28a734e486900fcd68a235a251b3

  • SHA256

    a62d5acae7355991b2d967c2d77aa329b3a9fe234bf2616748aaaf14196966b7

  • SHA512

    befb7dbf0be18db82ab976e90021b90d05501b41d837e0e0f365753063dc9f0af0eaf73ae46d0ae80a3f9b1cad90a76a29b34c3b290dcb432e09c534c45e0f88

  • SSDEEP

    6144:cLCoDvHwuTMwpQMLtK/mi6UN0p3JdRd8QKoy27EL4:cOoTHw0NXBGLV0pHjyL4

  Score

  10^/10

  stealcstealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2